1. Windows Server 2003 系統效能監視 林寶森 jeffl@ms11.hinet.net

2. Why Monitor Performance? Analyze performance data to uncover bottlenecks By monitoring performance, you obtain data that you can use to: –Understand your workload and the corresponding effect on your system's resources –Observe changes and trends in workloads and resource usage so you can plan for future upgrades –Test configuration changes or other tuning efforts by monitoring the results –Diagnose system problems and identify components or processes for optimization

3. System Bottlenecks Restrict Work Flow Over Consumption of a Specific Resource One Resolved Bottleneck May Cause Another Memory Processor

4. What Is Server Analysis and Optimization? Disk Processor Memory Network File and Print Server Domain Controller Application Server SQL Server Exchange

5. What Is Task Manager? Displays information about: – Programs and processes running on your computer – Status of running programs – Your computer’s performance – a dynamic overview – Network status – Number of users connected to the computer, what they are working on, and allows administrators to send a message

6. What Is the Performance Console? The Performance console contains System Monitor and Performance Logs and Alerts With System Monitor: –You can collect and view real-time data of a local computer or several remote computers –You can create graphs, histograms, and reports of the performance counter data Performance Logs and Alerts: –Provides logging and alert capabilities –Defines settings for counter logs, trace logs, and alerts

7. What Is Real-Time and Logged Monitoring? Real-Time Monitoring Logged Monitoring Involves processing and updating data counters as soon as data is received from the operating system Establishes the current state of the four subsystems: memory, processor, disk, and network Tool used is System Monitor Involves processing and updating data counters as soon as data is received from the operating system Establishes the current state of the four subsystems: memory, processor, disk, and network Tool used is System Monitor Involves collecting and storing data over time for analysis later Detects bottlenecks and determines whether the system changes Use Performance Logs and Alerts Involves collecting and storing data over time for analysis later Detects bottlenecks and determines whether the system changes Use Performance Logs and Alerts

8. System Monitor Performance ConsoleWindowHelp ActionViewFavorites TreeFavorites Console Root System Monitor Performance Logs and Alerts Counter Logs Trace Logs Alerts 100 90 80 70 60 50 40 30 20 10 0 Last0.000Average Maximum ColorScaleCounter 1,000% User Time 1,000% Processor Time 1,942 24,000 Minimum Duration InstanceParentOb _Total- - -Pro _Total- - -Pro Add Counters Use local computer Select counters from computer \\PHOENIX Processor Performance object: All counters Select counters from list % DPC Time % Interrupt Time % Privileged Time % Processor Time % User Time APC Bypasses/sec DPS Bypasses/sec Add Close Explain All instances Select instances from list: _ Total 0 Add Counters… Save As… Properties… Add counters to view data in the graph area Add counters to view data in the graph area

9. Objects, Instances, and Counters Objects Are Major Components or Subsystems of the Computer System Instances Are Multiples of the Same Object Counters: –Are Measurements of different aspects of objects –Continually gather data on objects –Provide data on all instances of an object –Can be selected to displayed in System Monitor

10. Viewing Counter Data 100 0 20 40 60 80 LastAverage Maximum 1.993 15.000 0.000Minimum Duration 100 0 20 40 60 80 LastAverage Maximum 4.851 31.000 16.162 Minimum Duration 0.000 1:40 HistogramHistogram \\PHOENIX LogicalDisk % Disk Read Time % Disk Write Time _Total 0.000 Memory Available Bytes38830080.000 Processor % Processor Time _Total 16.162 ReportReport ChartChart

11. Identify and Resolve Memory Bottlenecks Memory counter Acceptable average range Desired value Action Pages/sec 0–20Low Find the process that is causing paging Add RAM Available Bytes Minimum of 5% of total memory High Find the process that is using RAM Add RAM Committed Bytes Less than physical RAM Low Find the process that is using RAM Add RAM Pool Nonpaged Bytes Remain steady, no increase Not applicable Check for memory leak in application Page Faults/sec Below 5Low Find the process that is causing paging Add RAM

12. Virtual Memory Management FFFFFFFFh 00000000h Physical Memory Free Page 1 Process 2, Page 3 Process 1, Page 2 System, Page 1 Process 1, Page 1 Free Page 2 System, Page 3 Process 2, Page 1 Process 2, Page 2 Process 1, Page 3 Free Page 3 System, Page 2 Page Directory for Process 2 Page Directory for Process 2 Page Directory for Process 1 Page Directory for Process 1 Virtual MemoryVirtual to Physical Mapping System Addressable Memory (2 GB) System Addressable Memory (2 GB) Process 1 Application Addressable Memory Process 1 Application Addressable Memory Process 2 Application Addressable Memory Process 2 Application Addressable Memory

13. The Windows Memory ModelPagefile.sys Virtual Memory 2 GB Program Address Space 2 GB Program Address Space 2 GB Program Address Space 2 GB Program Address Space App 1 App 2 VirtualMemoryManagerVirtualMemoryManager App 1 App 2 App 1 App 2 System Physical Memory Pages 1 1 2 2 3 3 Demand Paging 4 4

14. Identify and Resolve Processor Bottlenecks Processor counter Acceptable average range Desired value Action % Processor Time Less than 85%Low Find process using excessive processor time Upgrade or add another processor System: Processor Queue Length Less than 2Low Upgrade or add additional processor Server Work Queues: Queue Length Less than 2Low Find process using excessive processor time Upgrade or add another processor Interrupts/sec Depends on processor Low Find controller card generating interrupts

15. Identify and Resolve Disk Bottlenecks Physical disk counter Acceptable average range Desired value Action % Disk TimeUnder 50%Low Monitor to see if paging is occurring Upgrade disk subsystem Current Disk Queue Length0–2LowUpgrade disk subsystem Avg. Disk Bytes/TransferBaseline or higherHighUpgrade disk subsystem Disk Bytes/secBaseline or higherHighUpgrade disk subsystem

16. Identify and Resolve Network Bottlenecks Network interface counter Acceptable average range Desired value Action Network Utilization (in Task Manager) Generally lower than 30%Low Network Interface: Bytes Sent/sec Baseline or higherHigh Upgrade network adapter or physical network Network Interface: Bytes Total/sec Baseline or higherHigh Perform further analysis to determine cause of problem Upgrade or add another adapter Server: Bytes Received/Sec Less than 50% of the capacity of the bandwidth of the network card NA Upgrade network adapter or physical network

17. What Is a Counter Log? Each performance object provides performance counters that represent data about specific aspects of a sytem or server Counter logs define what data is stored in the log file

18. Counter Log File Formats Log File FormatDescriptionWhen to use Text File (Comma delimited) Comma-delimited log file (with a.csv extension) To export log data into a spreadsheet program Text File (Tab delimited) Tab-delimited log file (with a.tsv extension) To export log data into a spreadsheet program Binary File Sequential, binary-format log file (with a.blg extension) To record data instances that are intermittent Binary Circular File Circular, binary-format log file (with a.blg extension) To record data continuously to same log file SQL Database Name of an existing SQL database and log set within the database where performance data will be read or written To collect performance data at an enterprise level rather than a per-computer basis

19. What Is an Alert? Feature that detects when a predefined counter value rises above or falls below a specified setting Specified setting on the counter is called alert threshold Set an alert on a counter when: –Make an entry in application event log –Start a predefined counter log –Send a Message –Run a Program Set alerts based on established performance baseline values Use alerts to be notified when a counter threshold value exceeds or falls below a specified value

20. Using Alerts Interval: GeneralActionSchedule Log an entry in the application event log Send a network message to: When an alert is triggered: Start performance data log: Run this program: Browse…Browse… Processor Text 1. Add counters 3. Specify actions Processor Select counters from list Add Counters Use local computer Select counters from computer \\PHOENIX All counters Add Close Explain All instances Select instances from list: Performance object: Alert when the value is:UnderLimit: Sample data every: 5 Units: seconds Add…Remove 2. Set thresholds

21. Why Monitor Servers Remotely? To prevent Task Manager and Performance from adding to the load on the server, which can misrepresent the collected data Also, administrators are often responsible for hundreds of servers, which makes it impractical to monitor each server individually